Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251841 6.8 警告 Apache Software Foundation - Apache Struts 2 における任意の Java メソッド実行の脆弱性 CWE-Other
その他
CVE-2012-0838 2012-02-10 12:02 2012-02-10 Show GitHub Exploit DB Packet Storm
251842 5.8 警告 4homepages - 4images の admin/index.php におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認
CVE-2012-1023 2012-02-10 11:10 2012-02-8 Show GitHub Exploit DB Packet Storm
251843 7.5 危険 4homepages - 4images の admin/categories.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-1022 2012-02-10 11:08 2012-02-8 Show GitHub Exploit DB Packet Storm
251844 4.3 警告 4homepages - 4images の admin/categories.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1021 2012-02-10 10:35 2012-02-8 Show GitHub Exploit DB Packet Storm
251845 4.3 警告 Overseas - NexorONE Online Banking の login.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1020 2012-02-10 10:29 2012-02-8 Show GitHub Exploit DB Packet Storm
251846 4.3 警告 XWiki - XWiki Enterprise におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1019 2012-02-10 10:16 2012-02-8 Show GitHub Exploit DB Packet Storm
251847 4.3 警告 D-Mack Media - Joomla! 用 D-Mack Media Currency Converter モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1018 2012-02-10 10:15 2012-02-8 Show GitHub Exploit DB Packet Storm
251848 7.5 危険 Secure Ideas - Basic Analysis and Security Engine の base_qry_main.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-1017 2012-02-10 10:14 2012-02-8 Show GitHub Exploit DB Packet Storm
251849 4.3 警告 ]project-open[ - Project Open にクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1027 2012-02-9 18:34 2012-02-6 Show GitHub Exploit DB Packet Storm
251850 4.3 警告 Sphinx Software - Sphinx Software Mobile Web Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1005 2012-02-9 16:52 2012-02-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
215231 4.8 MEDIUM
Network
chadhaajay phpkb Reflected XSS in admin/edit-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p. CWE-79
Cross-site Scripting
CVE-2020-10466 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
215232 4.8 MEDIUM
Network
chadhaajay phpkb Reflected XSS in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p. CWE-79
Cross-site Scripting
CVE-2020-10465 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
215233 4.8 MEDIUM
Network
chadhaajay phpkb Reflected XSS in admin/edit-article.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p. CWE-79
Cross-site Scripting
CVE-2020-10464 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
215234 4.8 MEDIUM
Network
chadhaajay phpkb Reflected XSS in admin/edit-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p. CWE-79
Cross-site Scripting
CVE-2020-10463 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
215235 4.8 MEDIUM
Network
chadhaajay phpkb Reflected XSS in admin/edit-field.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p. CWE-79
Cross-site Scripting
CVE-2020-10462 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
215236 6.1 MEDIUM
Network
chadhaajay phpkb The way comments in article.php (vulnerable function in include/functions-article.php) are handled in Chadha PHPKB Standard Multi-Language 9 allows attackers to execute Stored (Blind) XSS (injecting … CWE-79
Cross-site Scripting
CVE-2020-10461 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
215237 4.9 MEDIUM
Network
chadhaajay phpkb admin/include/operations.php (via admin/email-harvester.php) in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject untrusted input inside CSV files via the POST parameter data. CWE-1236
 Improper Neutralization of Formula Elements in a CSV File
CVE-2020-10460 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
215238 2.7 LOW
Network
chadhaajay phpkb Path Traversal in admin/assetmanager/assetmanager.php (vulnerable function saved in admin/assetmanager/functions.php) in Chadha PHPKB Standard Multi-Language 9 allows attackers to list the files that… CWE-22
Path Traversal
CVE-2020-10459 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
215239 6.5 MEDIUM
Network
chadhaajay phpkb Path Traversal in admin/imagepaster/operations.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete any folder on the webserver using a dot-dot-slash sequence (../) via the GET pa… CWE-22
Path Traversal
CVE-2020-10458 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
215240 2.7 LOW
Network
chadhaajay phpkb Path Traversal in admin/imagepaster/image-renaming.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to rename any file on the webserver using a dot-dot-slash sequence (../) via the POST… CWE-22
Path Traversal
CVE-2020-10457 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm